Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
File: SiyGN2LOnZltKrq27eGSnM7ctjI.mft (raw, json)
Hash identifier: VUVAYCu3ojYc6UwnzTn6wdfA86UmvjLMkcmOHGaFgks=
Subject key identifier: B4:02:98:2E:CD:5A:8E:8C:10:86:0E:CB:03:40:44:B3:AD:7B:45:5E
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 0198D65FF095A18B9AFE828AD0931E585811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:08 +0000
Manifest this update: Sat 23 Aug 2025 10:01:08 +0000
Manifest next update: Sun 24 Aug 2025 10:01:08 +0000
Files and hashes: 1: HSzy_sdTpMM9eJp_2_sbD1IEYy0.roa (hash: ieQeEh5XwIx3cGbKm9ddEXjqNduJq3qUmYGe9bdZpCY=)
2: SiyGN2LOnZltKrq27eGSnM7ctjI.crl (hash: KuWWNKiMOzBdkoaC5e6IhKl58WzBpYnxPHOJsTksyOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f0:95:a1:8b:9a:fe:82:8a:d0:93:1e:58:58:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Aug 23 10:01:08 2025 GMT
Not After : Aug 24 10:01:08 2025 GMT
Subject: CN=b402982ecd5a8e8c10860ecb034044b3ad7b455e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:31:8b:c9:34:db:e6:e4:9a:68:fe:c1:6a:a1:
bb:0f:d6:f1:48:22:bc:b6:9c:b6:78:02:8a:9c:99:
76:5a:a2:d3:cf:88:53:61:16:1e:11:f9:96:f1:09:
04:52:fd:82:fd:c1:44:a5:39:29:bf:ef:1d:fb:85:
ae:1a:fe:38:8a:3d:c9:6b:72:83:d4:45:72:74:10:
70:a5:f9:11:24:da:b8:a9:b4:03:4e:00:21:4f:4a:
be:ef:8b:89:b3:7a:5b:af:06:fc:4d:18:8c:a8:22:
78:a5:2f:a1:25:7c:95:9a:1f:47:f6:f6:d8:cf:08:
6f:42:cc:53:c9:82:44:52:65:fa:0f:4c:74:b5:f2:
3e:61:09:e2:53:5a:c8:36:3b:d7:ca:31:a1:5c:b3:
3d:d8:97:f4:af:be:08:3c:34:33:ff:cd:83:59:f0:
9c:06:e0:0e:fc:63:41:58:52:ce:af:51:85:05:3b:
1d:04:27:99:fa:29:02:7f:70:22:90:21:ad:8d:64:
f5:59:97:43:99:31:f7:45:39:3d:37:04:43:99:72:
ca:e3:df:38:53:ec:56:23:a3:dd:ea:b0:42:ab:29:
96:aa:ab:b9:33:13:4c:f1:12:0e:c8:56:22:35:b0:
cc:5d:48:e9:06:4a:35:d7:3d:8b:d0:94:53:bd:f5:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:02:98:2E:CD:5A:8E:8C:10:86:0E:CB:03:40:44:B3:AD:7B:45:5E
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:eb:d6:10:cf:ea:c8:ad:30:eb:5b:9d:99:c9:88:e5:26:1a:
8f:13:55:83:04:9d:82:b4:11:f4:16:9e:84:9f:b4:a7:21:63:
38:64:1b:e8:88:70:e9:f2:b1:92:a3:be:2a:83:37:33:d1:6f:
49:61:89:d4:9b:9e:f2:48:f0:75:75:19:b3:18:a1:ba:12:38:
d1:76:4e:4b:ab:9f:c0:e2:0f:e8:9b:42:95:dc:48:14:b7:c1:
9d:79:79:fb:81:0d:49:21:3c:3e:fb:8f:38:fa:ec:e0:e2:77:
6e:6a:58:3e:69:bf:97:45:58:42:ab:50:a3:48:3f:8f:6e:f3:
1e:fb:12:f3:ae:09:f3:fd:b8:94:03:50:9f:77:b5:02:19:14:
95:30:30:fc:68:4a:18:57:44:c8:1b:ab:69:93:0b:91:c1:fd:
e1:2b:fb:ea:c0:0a:4b:e9:73:6c:d1:cd:8b:3e:e3:39:57:bd:
6a:08:fb:e5:79:8a:d5:1f:35:41:53:70:f8:45:62:45:b5:f3:
5c:c9:c8:db:b9:b8:c2:f9:b7:7d:4a:c4:0c:41:43:29:ae:f9:
6f:fd:1e:46:6d:f7:9e:b2:a7:6c:29:59:99:10:e1:f6:9d:6e:
fc:0d:b7:00:30:57:66:da:f6:06:09:74:00:f9:b1:c7:63:68:
5d:a8:2d:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX/CVoYua/oKK0JMeWFgRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMmM4NjM3NjJjZTlkOTk2ZDJhYmFiNmVkZTE5MjljY2Vk
Y2I2MzIwHhcNMjUwODIzMTAwMTA4WhcNMjUwODI0MTAwMTA4WjAzMTEwLwYDVQQD
EyhiNDAyOTgyZWNkNWE4ZThjMTA4NjBlY2IwMzQwNDRiM2FkN2I0NTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+DGLyTTb5uSaaP7BaqG7D9bxSCK8
tpy2eAKKnJl2WqLTz4hTYRYeEfmW8QkEUv2C/cFEpTkpv+8d+4WuGv44ij3Ja3KD
1EVydBBwpfkRJNq4qbQDTgAhT0q+74uJs3pbrwb8TRiMqCJ4pS+hJXyVmh9H9vbY
zwhvQsxTyYJEUmX6D0x0tfI+YQniU1rINjvXyjGhXLM92Jf0r74IPDQz/82DWfCc
BuAO/GNBWFLOr1GFBTsdBCeZ+ikCf3AikCGtjWT1WZdDmTH3RTk9NwRDmXLK4984
U+xWI6Pd6rBCqymWqqu5MxNM8RIOyFYiNbDMXUjpBko11z2L0JRTvfUfMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQCmC7NWo6MEIYOywNARLOte0VeMB8GA1UdIwQY
MBaAFEoshjdizp2ZbSq6tu3hkpzO3LYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTIt
YzQ3MTg0ZmRhYzM5LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTItYzQ3MTg0ZmRhYzM5
LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOvWEM/q
yK0w61udmcmI5SYajxNVgwSdgrQR9BaehJ+0pyFjOGQb6Ihw6fKxkqO+KoM3M9Fv
SWGJ1Jue8kjwdXUZsxihuhI40XZOS6ufwOIP6JtCldxIFLfBnXl5+4ENSSE8PvuP
OPrs4OJ3bmpYPmm/l0VYQqtQo0g/j27zHvsS864J8/24lANQn3e1AhkUlTAw/GhK
GFdEyBuraZMLkcH94Sv76sAKS+lzbNHNiz7jOVe9agj75XmK1R81QVNw+EViRbXz
XMnI27m4wvm3fUrEDEFDKa75b/0eRm33nrKnbClZmRDh9p1u/A23ADBXZtr2Bgl0
APmxx2NoXagtwg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:45 2025 by rpki-client